Woo Slider Pro Drag Drop Slider Builder For Woocommerce Vulnerabilities

The Woo Slider Pro – Drag Drop Slider Builder For WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.12. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitr...

CVSS:

4.3

Affected:

up to 1.12

Fix:

No patched version reported

Disclosed:

May 30, 2025

CVE-2025-48334 on NVD →

[en] Missing Authorization vulnerability in BinaryCarpenter Woo Slider Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Woo Slider Pro: from n/a through 1.12. Affected action "woo_slide_pro_delete_slider".

Affected:

up to 1.12

Fix:

No patched version reported

Disclosed:

May 30, 2025

CVE-2025-48334 on NVD →

The Woo Slider Pro – Drag Drop Slider Builder For WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the woo_slide_pro_delete_draft_preview AJAX action in all versions up to, and including, 1.12. This makes it possible for authenticated attackers, wi...

CVSS:

6.5

Affected:

up to 1.12

Fix:

No patched version reported

Disclosed:

May 29, 2025

CVE-2025-4597 on NVD →

Affected:

up to 1.12

Fix:

No patched version reported

CVE-2025-4597 on NVD →